Tuya H.265 IP Doorbell need help

[nordeep]

I know it's about YI cameras. But maybe someone could give some advice?
Original camera was YooSee SD-M5 doorbell, but at 2021 seems Tuya acquire Yoosee and completely change PCB. As a result, we lost a chance to hack firmware and get RTSP, mqtt and etc.
I'm here because new SOC(AX7s AYZ Tech) on PCB seems Allwiner like YI cameras have. I have some logs from UART.

s button stops U-Boot autoboot.

U-boot:

[41]HELLO! BOOT0 is starting Nov 14 2019 20:01:31!
[45]BOOT0 commit : 81c18ee
[48]board init start
[50]set pll start
[53]set pll end
[54][pmu]: bus read error
[57]board init ok
[59]chip id check OK
[61]DRAM BOOT DRIVE INFO: V0.41
[64]DRAM CLK = 504 MHz
[66]DRAM Type = 2 (2:DDR2,3:DDR3)
[69]DRAMC read ODT  off.
[72]DRAM ODT off.
[74]DRAM SIZE =64 M
[80]DRAM simple test OK.
[83]rtc standby flag is 0x0, super standby flag is 0x0
[88]dram size =64
[90]key press : s
[92]spinor id is: c8 40 18, read cmd: 03
[96]Succeed in reading toc file head.
[100]The size of toc is 6c000.
[174]Entry_name        = optee
[177]Entry_name        = u-boot
[182]Entry_name        = dtb
[185]Jump to secend Boot.
MESSAGE: [0x0] TEE-CORE: OP-TEE version: sun8iw19p1_v0.6.0-12-g97f2688 #1 2019? 11? 08? ??? 08:26:51 UTC arm
ERROR:   [0x0] TEE-CORE:platform_standby_fdt_parse:126: no pmu node
ERROR:   [0x0] TEE-CORE:sunxi_twi_parse_from_dt:84: no pmu node


U-Boot 2018.05 (Aug 21 2021 - 17:03:59 +0800) Allwinner Technology

I2C:   ready
[00.255]Relocation Offset is: f9f6c000
[00.272]secure enable bit: 0
[00.274]gic: sec monitor mode
[00.277]flash init start
[00.279]workmode = 0,storage type = 3
SF: Detected gd25q128 with page size 256 Bytes, erase size 4 KiB, total 16 MiB
[00.296]sunxi flash init ok
[00.299]Loading Environment from SUNXI_FLASH... OK
[00.331]update dts
root_partition is rootfs
set root to /dev/mtdblock2
[00.341]update part info
[00.343]update bootcmd
[00.345]No ethernet found.
Hit any key to stop autoboot:  0
=> ss
Unknown command 'ss' - try 'help'
=> env print
boot_fastboot=fastboot
boot_normal=sunxi_flash read 45000000 boot;bootm 45000000
boot_recovery=sunxi_flash read 45000000 extend;bootm 45000000
bootcmd=run setargs_nor boot_normal
bootdelay=0
cma=4M
coherent_pool=16K
console=ttyS0,115200
earlyprintk=sunxi-uart,0x05000000
fastboot_key_value_max=0x8
fastboot_key_value_min=0x2
fdtcontroladdr=42b3a298
init=/pseudo_init
initcall_debug=0
loglevel=4
mmc_root=/dev/mmcblk0p4
nand_root=/dev/nand0p4
nor_root=/dev/mtdblock2
partitions=boot@mtdblock1:rootfs@mtdblock2:rootfs_data@mtdblock3:env@mtdblock4:misc@mtdblock5:id@mtdblock6:private@mtdblock7:UDISK@mtdblock8
rdinit=/rdinit
recovery_key_value_max=0x13
recovery_key_value_min=0x10
root_partition=rootfs
setargs_mmc=setenv  bootargs earlyprintk=${earlyprintk} initcall_debug=${initcall_debug} console=${console} loglevel=${loglevel} root=${mmc_root}  rootwait init=${init} rdinit=${rdinit} partitions=${partitions} cma=${cma} mac_addr=${mac} wifi_mac=${wifi_mac} bt_mac=${bt_mac} selinux=${selinux} specialstr=${specialstr} coherent_pool=${coherent_pool} ion_carveout_list=${reserve_list}
setargs_nand=setenv bootargs earlyprintk=${earlyprintk} initcall_debug=${initcall_debug} console=${console} loglevel=${loglevel} root=${nand_root} rootwait init=${init} rdinit=${rdinit} partitions=${partitions} cma=${cma} mac_addr=${mac} wifi_mac=${wifi_mac} bt_mac=${bt_mac} selinux=${selinux} specialstr=${specialstr} coherent_pool=${coherent_pool} ion_carveout_list=${reserve_list}
setargs_nor=setenv bootargs  earlyprintk=${earlyprintk} initcall_debug=${initcall_debug} console=${console} loglevel=${loglevel} root=${nor_root} rootwait init=${init} rdinit=${rdinit} partitions=${partitions} cma=${cma} coherent_pool=${coherent_pool} ion_carveout_list=${reserve_list}
verify=N

Environment size: 1820/131068 bytes

Boot log. loglevel=8

## Booting kernel from Legacy Image at 45000000 ...
   Image Name:   ARM OpenWrt Linux-4.9.118
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2601216 Bytes = 2.5 MiB
   Load Address: 40008000
   Entry Point:  40008000
[108.998]Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.118 (lzh@lzh-Pad) (gcc version 6.4.1 (OpenWrt/Linaro GCC 6.4-2017.11 2017-11) ) #2357 PREEMPT Thu Mar 24 06:01:52 UTC 2022
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=50c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt:Machine model: sun8iw19
[    0.000000] ion_mem_reserve: err format for ion reserve list!
[    0.000000] cma: Reserved 4 MiB at 0x43c00000
[    0.000000] Memory policy: Data cache writeback
[    0.000000] On node 0 totalpages: 16384
[    0.000000] free_area_init_node: node 0, pgdat c042d64c, node_mem_map c3b77000
[    0.000000]   Normal zone: 128 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 16384 pages, LIFO batch:3
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.0 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.0
[    0.000000] CPU: All CPU(s) started in SVC mode.
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: earlyprintk=sunxi-uart,0x05000000 initcall_debug=0 console=ttyS0,115200 loglevel=8 root=/dev/mtdblock2 rootwait init=/pseudo_init rdinit=/rdinit partitions=boot@mtdblock1:rootfs@mtdblock2:rootfs_data@mtdblock3:env@mtdblock4:misc@mtdblock5:id@mtdblock6:private@mtdblock7:UDISK@mtdblock8 cma=4M coherent_pool=16K ion_carveout_list= androidboot.hardware=sun8iw19p1 boot_type=3 androidboot.boot_type=3 gpt=1 uboot_message=2018.05(08/21/2021-17:03:59)
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 56048K/65536K available (2733K kernel code, 184K rwdata, 1056K rodata, 128K init, 131K bss, 5392K reserved, 4096K cma-reserved)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xc4800000 - 0xff800000   ( 944 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc4000000   (  64 MB)
[    0.000000]     modules : 0xbf800000 - 0xc0000000   (   8 MB)
[    0.000000]       .text : 0xc0008000 - 0xc02b37f8   (2734 kB)
[    0.000000]       .init : 0xc03e0000 - 0xc0400000   ( 128 kB)
[    0.000000]       .data : 0xc0400000 - 0xc042e1d8   ( 185 kB)
[    0.000000]        .bss : 0xc042e1d8 - 0xc044edd8   ( 131 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000]  Build-time adjustment of leaf fanout to 32.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] clocksource: timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 79635851949 ns
[    0.000000] arm_arch_timer: Architected cp15 timer(s) running at 24.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[    0.000007] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[    0.000022] Switching to timer-based delay loop, resolution 41ns
[    0.000166] Console: colour dummy device 80x30
[    0.000194] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[    0.000210] pid_max: default: 32768 minimum: 301
[    0.000384] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000397] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000998] CPU: Testing write buffer coherency: ok
[    0.001291] Setting up static identity map for 0x400081c0 - 0x4000820c
[    0.003303] devtmpfs: initialized
[    0.031068] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.031447] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.031471] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.031794] atomic64_test: passed
[    0.031809] pinctrl core: initialized pinctrl subsystem
[    0.032696] NET: Registered protocol family 16
[    0.033869] DMA: preallocated 16 KiB pool for atomic coherent allocations
[    0.035357] dump_class_init,857, success
[    0.036737] sunxi iommu: irq = 23
[    0.042491] sun8iw19p1-r-pinctrl r_pio: initialized sunXi PIO driver
[    0.058245] sun8iw19p1-pinctrl pio: initialized sunXi PIO driver
[    0.060976] iommu: Adding device 1c0e000.ve to group 0
[    0.062259] iommu: Adding device 2300000.eise to group 0
[    0.070843] iommu: Adding device 1480000.g2d to group 0
[    0.071509] iommu: Adding device 2400000.nna to group 0
[    0.075216] iommu: Adding device csi0 to group 0
[    0.076205] iommu: Adding device csi1 to group 0
[    0.077882] iommu: Adding device 2100000.isp to group 0
[    0.078611] iommu: Adding device 2104000.scaler to group 0
[    0.078952] iommu: Adding device 2104400.scaler to group 0
[    0.079307] iommu: Adding device 2104800.scaler to group 0
[    0.079992] iommu: Adding device 2104c00.scaler to group 0
[    0.081103] iommu: Adding device vinc0 to group 0
[    0.081933] iommu: Adding device vinc1 to group 0
[    0.117730] usbcore: registered new interface driver usbfs
[    0.117835] usbcore: registered new interface driver hub
[    0.118779] usbcore: registered new device driver usb
[    0.119068] sunxi_i2c_adap_init()2553 - init
[    0.119622] sunxi_i2c_probe()2213 - [i2c1] warning: failed to get regulator id
[    0.120295] sunxi_i2c_probe()2281 - [i2c1] no_suspend = 0
[    0.120323] twi1 supply twi not found, using dummy regulator
[    0.120434] twi_request_gpio()452 - [i2c1] init name: twi1
[    0.122515] sunxi_i2c_probe()2213 - [i2c2] warning: failed to get regulator id
[    0.122601] sunxi_i2c_probe()2281 - [i2c2] no_suspend = 0
[    0.122622] twi2 supply twi not found, using dummy regulator
[    0.122707] twi_request_gpio()452 - [i2c2] init name: twi2
[    0.123941] media: Linux media interface: v0.10
[    0.124082] Linux video capture interface: v2.00
[    0.125416] ion_parse_dt_heap_common: id 0 type 0 name sys_user align 1000
[    0.125676] ion_parse_dt_heap_common: id 1 type 1 name sys_contig align 1000
[    0.125898] ion_parse_dt_heap_common: id 4 type 4 name cma align 1000
[    0.164209] Advanced Linux Sound Architecture Driver Initialized.
[    0.167573] G2D: rcq version initialized.major:251
[    0.168433] clocksource: Switched to clocksource arch_sys_counter
[    0.189720] get androidboot.mode fail
[    0.189904] NET: Registered protocol family 2
[    0.190719] TCP established hash table entries: 16 (order: -6, 64 bytes)
[    0.190736] TCP bind hash table entries: 16 (order: -6, 64 bytes)
[    0.190747] TCP: Hash tables configured (established 16 bind 16)
[    0.190822] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.190843] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.191025] NET: Registered protocol family 1
[    0.191631] sunxi_spi_probe()2322 - [spi0] SPI MASTER MODE
[    0.191717] spi0 supply spi not found, using dummy regulator
[    0.191801] sunxi_spi_request_gpio()1948 - [spi0] Pinctrl init spi0
[    0.191895] sunxi_spi_clk_init()1998 - [spi0] mclk 300000000
[    0.192615] spi spi0: master is unqueued, this is deprecated
[    0.193001] sunxi_spi_probe()2403 - [spi0]: driver probe succeed, base c482c000, irq 302
[    0.195259] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.209199] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.210034] exFAT: Version 1.2.9
[    0.210572] jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
[    0.215494] NET: Registered protocol family 38
[    0.215548] io scheduler noop registered
[    0.215557] io scheduler deadline registered
[    0.215864] io scheduler cfq registered (default)
[    0.218368] uart uart0: get regulator failed
[    0.218397] uart0 supply uart not found, using dummy regulator
[    0.219047] uart0: ttyS0 at MMIO 0x5000000 (irq = 294, base_baud = 1500000) is a SUNXI
[    0.219080] sw_console_setup()1777 - console setup baud 115200 parity n bits 8, flow n
[    1.071269] console [ttyS0] enabled
[    1.076326] misc dump reg init
[    1.081686] loop: module loaded
[    1.086319] sunxi-wlan wlan: wlan_busnum (1)
[    1.091236] sunxi-wlan wlan: wlan_power_num (-1)
[    1.096435] sunxi-wlan wlan: Missing wlan_io_regulator.
[    1.102352] sunxi-wlan wlan: io_regulator_name ((null))
[    1.108241] sunxi-wlan wlan: request pincrtl handle for device [wlan] failed
[    1.116360] sunxi-wlan wlan: wlan_regon gpio=198  mul-sel=1  pull=0  drv_level=1  data=0
[    1.125546] sunxi-wlan wlan: get gpio chip_en failed
[    1.131194] sunxi-wlan wlan: wlan_hostwake gpio=199  mul-sel=0  pull=0  drv_level=1  data=0
[    1.140633] sunxi-wlan wlan: wakeup source is disabled!
[    1.146516] sunxi-wlan wlan: clk_name ()
[    1.151869] [ADDR_MGT] addr_mgt_probe: success.
[    1.160334] m25p80 spi0.0: recognized JEDEC id:0xc84018
[    1.166223] m25p80 spi0.0: found gd25q128, expected m25p80
[    1.172710] m25p80 spi0.0: gd25q128 (16384 Kbytes)
[    1.182029] 9 sunxipart partitions found on MTD device spi0.0
[    1.188613] Creating 9 MTD partitions on "spi0.0":
[    1.194015] 0x000000000000-0x000000100000 : "uboot"
[    1.201166] 0x000000100000-0x000000400000 : "boot"
[    1.208317] 0x000000400000-0x000000e80000 : "rootfs"
[    1.215854] 0x000000e80000-0x000000f00000 : "rootfs_data"
[    1.223848] 0x000000f00000-0x000000f20000 : "env"
[    1.231229] 0x000000f20000-0x000000f30000 : "misc"
[    1.238610] 0x000000f30000-0x000000f38000 : "id"
[    1.245739] 0x000000f38000-0x000000f48000 : "private"
[    1.253527] 0x000000f48000-0x0000010f7e00 : "UDISK"
[    1.259444] mtd: partition "UDISK" extends beyond the end of device "spi0.0" -- size truncated to 0xb8000
[    1.272393] libphy: Fixed MDIO Bus: probed
[    1.278288] sun8iw19p1-pinctrl pio: expect_func as:gmac0, but muxsel(5) is func:ephy
[    1.288040] gmac-power0: NULL
[    1.291580] gmac-power1: NULL
[    1.294919] gmac-power2: NULL
[    1.299616] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.307240] get drv_vbus is fail, 84
[    1.311586] get ehci0-controller, regulator_io is no nocare
[    1.317860] get ehci0-controller wakeup-source is fail.
[    1.323979] sunxi ehci0-controller don't init wakeup source
[    1.330316] [sunxi-ehci0]: probe, pdev->name: 5101000.ehci0-controller, sunxi_ehci: 0xc0449528, 0x:c488b000, irq_no:12b
[    1.342589] sunxi-ehci 5101000.ehci0-controller: SW USB2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.352853] sunxi-ehci 5101000.ehci0-controller: new USB bus registered, assigned bus number 1
[    1.362820] sunxi-ehci 5101000.ehci0-controller: irq 299, io mem 0xc3705c00
[    1.398464] sunxi-ehci 5101000.ehci0-controller: USB 0.0 started, EHCI 1.00
[    1.407384] hub 1-0:1.0: USB hub found
[    1.411882] hub 1-0:1.0: 1 port detected
[    1.416623] [ehci0-controller]: sunxi_usb_disable_ehci
[    1.422473] [sunxi-ehci0]: remove, pdev->name: 5101000.ehci0-controller, sunxi_ehci: 0xc0449528
[    1.432313] sunxi-ehci 5101000.ehci0-controller: remove, state 1
[    1.439160] usb usb1: USB disconnect, device number 1
[    1.445777] sunxi-ehci 5101000.ehci0-controller: USB bus 1 deregistered
[    1.453994] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    1.461447] get drv_vbus is fail, 84
[    1.465477] get ohci0-controller, regulator_io is no nocare
[    1.471830] get ohci0-controller wakeup-source is fail.
[    1.477872] sunxi ohci0-controller don't init wakeup source
[    1.484346] [sunxi-ohci0]: probe, pdev->name: 5101000.ohci0-controller, sunxi_ohci: 0xc0448cd8
[    1.494137] sunxi-ohci 5101000.ohci0-controller: SW USB2.0 'Open' Host Controller (OHCI) Driver
[    1.504007] sunxi-ohci 5101000.ohci0-controller: new USB bus registered, assigned bus number 1
[    1.513776] sunxi-ohci 5101000.ohci0-controller: irq 300, io mem 0xc364a400
[    1.593541] hub 1-0:1.0: USB hub found
[    1.597976] hub 1-0:1.0: 1 port detected
[    1.602761] [ohci0-controller]: sunxi_usb_disable_ohci
[    1.608599] [sunxi-ohci0]: remove, pdev->name: 5101000.ohci0-controller, sunxi_ohci: 0xc0448cd8
[    1.618392] sunxi-ohci 5101000.ohci0-controller: remove, state 1
[    1.625247] usb usb1: USB disconnect, device number 1
[    1.631725] sunxi-ohci 5101000.ohci0-controller: USB bus 1 deregistered
[    1.640043] usb_serial_number:20080411
[    1.644795] sunxi_gpadc_init,1777, success
[    1.649863] sunxi_gpadc_probe(1628) start
[    1.654988] input: sunxi-gpadc0 as /devices/virtual/input/input0
[    1.662358] sunxi_gpadc->irq_num=318
[    1.666449] sunxi_gpadc_probe(1688) success
[    1.672250] sunxi-rtc rtc: rtc core: registered sunxi-rtc as rtc0
[    1.679411] sunxi-rtc rtc: RTC enabled
[    1.684033] i2c /dev entries driver
[    1.688811] sunxi cedar version 0.1
[    1.692858] VE: install start!!!
[    1.692858]
[    1.698297] cedar_ve: cedar-ve the get irq is 291
[    1.703947] VE: line 1811 set the sram data
[    1.703947]
[    1.710983] VE: ve_debug_proc_info:c044a638, data:c379c000, lock:c044a6c0
[    1.710983]
[    1.720563] VE: install end!!!
[    1.720563]
[    1.726095] google_vp9: sunxi google vp9 version 0.1
[    1.732882] sunxi-wdt 30090a0.watchdog: Watchdog enabled (timeout=16 sec, nowayout=0)
[    1.743754] sun8iw19p1-pinctrl pio: expect_func as:uart0_jtag, but muxsel(3) is func:jtag0
[    1.753491] sun8iw19p1-pinctrl pio: expect_func as:uart0_jtag, but muxsel(3) is func:jtag0
[    1.762922] sun8iw19p1-pinctrl pio: expect_func as:uart0_jtag, but muxsel(3) is func:uart0
[    1.772312] sun8iw19p1-pinctrl pio: expect_func as:uart0_jtag, but muxsel(3) is func:jtag0
[    1.781653] sun8iw19p1-pinctrl pio: expect_func as:uart0_jtag, but muxsel(3) is func:uart0
[    1.790987] sun8iw19p1-pinctrl pio: expect_func as:uart0_jtag, but muxsel(3) is func:jtag0
[    1.800659] sunxi-mmc sdc0: SD/MMC/SDIO Host Controller Driver(v3.38 2020-4-3 9:48)
[    1.809353] sunxi-mmc sdc0: ***ctl-spec-caps*** 8
[    1.814700] sunxi-mmc sdc0: No vmmc regulator found
[    1.820217] sunxi-mmc sdc0: No vqmmc regulator found
[    1.825803] sunxi-mmc sdc0: No vdmmc regulator found
[    1.831403] sunxi-mmc sdc0: No vd33sw regulator found
[    1.837086] sunxi-mmc sdc0: No vd18sw regulator found
[    1.842784] sunxi-mmc sdc0: No vq33sw regulator found
[    1.848479] sunxi-mmc sdc0: No vq18sw regulator found
[    1.854716] sunxi-mmc sdc0: set host busy
[    1.859353] sunxi-mmc sdc0: Got CD GPIO
[    1.863781] sunxi-mmc sdc0: min-frequency:100000
[    1.869300] sunxi-mmc sdc0: sdc set ios:clk 0Hz bm PP pm UP vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.128518] sunxi-mmc sdc0: no vqmmc,Check if there is regulator
[    2.158463] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.198625] sunxi-mmc sdc0: detmode:gpio irq
[    2.198655] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.205589] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.228601] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.239713] sunxi-mmc sdc1: SD/MMC/SDIO Host Controller Driver(v3.38 2020-4-3 9:48)
[    2.239859] sunxi-mmc sdc1: No vmmc regulator found
[    2.239864] sunxi-mmc sdc1: No vqmmc regulator found
[    2.239870] sunxi-mmc sdc1: No vdmmc regulator found
[    2.239875] sunxi-mmc sdc1: No vd33sw regulator found
[    2.239881] sunxi-mmc sdc1: No vd18sw regulator found
[    2.239886] sunxi-mmc sdc1: No vq33sw regulator found
[    2.239892] sunxi-mmc sdc1: No vq18sw regulator found
[    2.239908] sunxi-mmc sdc1: Cann't get uart0 pinstate,check if needed
[    2.240375] sunxi-mmc sdc1: set host busy
[    2.240437] mmc:failed to get gpios
[    2.240720] sunxi-mmc sdc1: sdc set ios:clk 0Hz bm PP pm UP vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.240757] sunxi-mmc sdc1: no vqmmc,Check if there is regulator
[    2.272000] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.300994] sunxi-mmc sdc1: detmode:manually by software
[    2.345456] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    2.351851] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.362658] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    2.362725] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.365228] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.372729] sunxi-mmc sdc1: smc 1 p1 err, cmd 8, RTO !!
[    2.384034] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    2.384916] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    2.384955] mostcore: init()
[    2.385458] doorCtrl probe
[    2.386623] doorCtrl_probe success
[    2.386937] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    2.387109] gpio_led_probe start
[    2.387257] leds_num=1
[    2.387291] led0_gpio gpio(232),mul_sel=1,value=0
[    2.387494] gpio_led_probe success
[    2.388304] gc1808_codec_platform_probe() 89
[    2.389541] sunxi-daudio daudio0: regulator missing or invalid
[    2.389640] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    2.390512] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    2.390638] digital_vol:0, lineout_vol:31, main_gain:23, pa_msleep:160, pa_level:1
[    2.390648] adcdrc_cfg:0, adchpf_cfg:1, dacdrc_cfg:1, dachpf:0
[    2.390677] gpio-spk:238
[    2.390791] sunxi-internal-codec codec: [sunxi_internal_codec_probe] codec probe finished.
[    2.391368] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    2.391650] [sunxi_card_init] card init finished.
[    2.392087] sunxi-codec-machine sndcodec: sun8iw19codec <-> codec mapping ok
[    2.392219] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    2.393075] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    2.393108] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm OD pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.394040] sunxi-mmc sdc1: smc 1 p1 err, cmd 1, RTO !!
[    2.394065] sunxi-mmc sdc1: sdc set ios:clk 0Hz bm PP pm OFF vdd 0 width 1 timing LEGACY(SDR12) dt B
[    2.554711] sunxi-codec-machine sndcodec: [sunxi_card_dev_probe] register card finished.
[    2.555372] NET: Registered protocol family 17
[    2.555429] NET: Registered protocol family 15
[    2.556022] Registering SWP/SWPB emulation handler
[    2.674244] get det_vbus is fail, 84
[    2.678300] get id is fail, 84
[    2.682794] sunxi-rtc rtc: setting system clock to 1970-01-01 00:01:30 UTC (90)
[    2.692144] snddaudio snddaudio0: codec: gc1808, codec_dai: gc1808-codec-dai.
[    2.700373] gc1808_codec_probe() 45
[    2.704621] snddaudio snddaudio0: gc1808-codec-dai <-> daudio0 mapping ok
[    2.712418] gc1808_codec_set_bias_level() 58 level:1
[    2.719943] sunxi-mmc sdc0: sdc set ios:clk 0Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.730881] ALSA device list:
[    2.730887]   #0: sun8iw19-codec
[    2.730891]   #1: sndgc1808
[    2.741811] sunxi-mmc sdc0: no vqmmc,Check if there is regulator
[    2.752673] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    2.762259] devtmpfs: mounted
[    2.765880] Freeing unused kernel memory: 128K
[    2.770920] This architecture does not have kernel memory protection.
[    2.778511] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    2.792041] random: fast init done
[    2.801747] mmc0: host does not support reading read-only switch, assuming write-enable
[    2.811793] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 4 timing LEGACY(SDR12) dt B
[    2.823794] sunxi-mmc sdc0: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 4 timing UHS-SDR104 dt B
[    2.834467] sunxi-mmc sdc0: sdc set ios:clk 150000000Hz bm PP pm ON vdd 21 width 4 timing UHS-SDR104 dt B
[    2.845701] mmc0: new ultra high speed SDR104 SDXC card at address 5048
[    2.855525] mmcblk0: mmc0:5048 SD64G 58.0 GiB
[    2.869430]  mmcblk0: p1
mount: mounting none on /dev failed: Resource busy
mount: mounting pstore on /sys/fs/pstore failed: No such file or directory
[    3.252505] jffs2: jffs2_scan_dirent_node(): Name CRC failed on node at 0x00061a8c: Read 0xcd6d872c, calculated 0xf6554880
[    3.269789] jffs2: error: (713) jffs2_build_filesystem: child dir "tmp" (ino #2) of dir ino #1 is also hard linked from dir ino #1
starting pid 728, tty '': '/etc/preinit'
can't run '/etc/preinit': No such file or directory
starting pid 729, tty '': '/bin/mount -t proc proc /proc'
mount: mounting proc on /proc failed: Resource busy
starting pid 730, tty '': '/bin/mount -t tmpfs tmpfs /run'
starting pid 731, tty '': '/bin/mount -o remount,rw /'
starting pid 732, tty '': '/bin/mkdir -p /dev/pts'
starting pid 733, tty '': '/bin/mkdir -p /dev/shm'
starting pid 734, tty '': '/bin/mount -a'
starting pid 735, tty '': '/bin/hostname -F /etc/hostname'
can't run '/bin/hostname': No such file or directory
starting pid 736, tty '': '/etc/init.d/rcS boot'
------run rc.preboot file-----
/etc/init.d/rcS: line 157: /bin/hostname: not found
[    3.567516] FAT-fs (mtdblock8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
hotplug vfat
[    3.713818] FAT-fs (mmcblk0p1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
mount: mounting /dev/mmcblk0p1 on /mnt/sdcard failed: Invalid argument[    3.731883] [EXFAT] trying to mount...

hotplug exfat
[    3.763254] [EXFAT] mounted successfully
------run rc.modules file-----
------run rc.final file-----
Load mpp modules
[    3.880427] [VIN_WARN]sensor_helper_probe: cannot get sensor0_iovdd supply, setting it to NULL!
[    3.893944] [VIN_WARN]sensor_helper_probe: cannot get sensor0_avdd supply, setting it to NULL!
[    3.903751] [VIN_WARN]sensor_helper_probe: cannot get sensor0_dvdd supply, setting it to NULL!
[    3.994445] gc2053 success!
mkdir: can't create directory '/dev/pts': File exists
mkdir: can't create directory '/dev/shm': File exists
Initializing random number generator... [    4.412541] random: dd: uninitialized urandom read (512 bytes read)
done.
Starting network: /etc/init.d/S40network: line 31: /sbin/ifup: not found
FAIL
enable android usb
[    4.495871] file system registered
[    4.507241] Mass Storage Function, version: 2009/09/11
[    4.513220] LUN: removable file: (no medium)
/etc/init.d/S50usb: line 99: adbd: not found
[    6.541940] configfs-gadget 5100000.udc-controller: failed to start g1: -19
sh: write error: No such device
Starting ipdoor: OK
starting pid 834, tty '/dev/console': '-/bin/sh'


BusyBox v1.27.2 () built-in shell (ash)

------run profile file-----
root@(none):/# [    6.808520]
[    6.808520] insmod_device_driver
[    6.808520]
[    6.815758] device_chose finished 122!
app version IPDOOR V1.0R Mar 24 2022 06:01:39

Read md5:9f6df9828db5241ca6ac5218b38b1448

Read md5:9f6df9828db5241ca6ac5218b38b1448
Same as MD5
[I/config][Config_para_init:605] version:ipdoor-v1.0
[I/svc_rec][svc_sys_init:1344] -->
>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Media Process Platform<<<<<<<<<<<<<<<<<<<<<<<<<<<<
modName : MPP-Platform
tag   : V1.0 Release
branch: v5-dev
commit: 4eed413532ad87725895a8cb1ba75e22fc328233
date  : 20170725
author: jenkins
[    7.645714] random: crng init done
[ISP]>>>>>>>>>>>>>>>>>>>> ISP VERSION INFO <<<<<<<<<<<<<<<<<<<
IPCORE: ISP521
branch: isp521-ipc
commit: efa5ea932f392e9a75f70a44a23a7c132a4cdda6
date  : Mon Nov 16 13:40:47 2020 +0800
author: <[email protected]>
--------------------------------------------------------

debug  : cedarc <VeInitialize:1133[    7.770625] cedar_ve: VE real_fre=300000000
>: shutdown  power up ve
debug  : cedarc <VeInitialize:1206>: *** nPhyOffset = 0x0
debug  : cedarc <VeSetSpeed:1716>: *** set ve freq to 300 Mhz ***
debug  : cedarc <VeInitialize:1261>: ve init ok

[I/svc_rec][svc_sys_init:1350] <--
[I/svc_rec][svc_media_init:1303] -->
[I/svc_rec][ai_channel_init:336] ai_channel_init start...
WARNING: Logging before InitGoogleLogging() is written to STDERR
W0101 00:01:35.844172   832 alsa_interface.c:435]           <alsaOpenPcm> open pcm! card:[default], pcmFlag:[0](0-cap;1-play)
W0101 00:01:35.901671   832 alsa_interface.c:435]           <alsaOpenPcm> open pcm! card:[hw:1,0], pcmFlag:[0](0-cap;1-play)
[    8.128763] snddaudio snddaudio0: codec_dai set sysclk failed
[    8.135243] snddaudio snddaudio0: codec_dai set set_pll failed.
[    8.141934] snddaudio snddaudio0: codec dai set fmt failed
[    8.148122] snddaudio snddaudio0: codec_dai set clkdiv failed
[    8.154716] gc1808_codec_set_bias_level() 58 level:2
[    8.160368] gc1808_codec_set_bias_level() 58 level:3
E0101 00:01:35.983373   832 alsa_interface.c:761]           <alsaMixerSetCapPlaySyncMode> aec_elem_sync_mode_switch:codec trigger substream mode-0
E0101 00:01:35.984166   857 AIChannel_Component.c:1890]     <AIChannel_ComponentThread> AI_Comp: loaded->idle ...
[I/svc_rec][svc_media_init:1315] <--
[W/DBG][door_power_ctrl:9] door_power_ctrl power_mode=4,param=-1
[I/doorCtrl][DoorCtrl_ir_set:131] DoorCtrl_ir_set 0
[I/svc_rec][svc_isp_switch:693] -->
[W/svc_rec][svc_isp_switch:701] ISP is not running
[W/DBG][event_mount_thread_loop:160] mount_type=2:/mnt/sdcard
[I/digbell][Digbell_win_proc:821] tf mount
[I/wifi_proc][Wifi_cmd_add:314] cmd_data->cmd=1
[I/wifi_proc][Wifi_thread_loop:485] cmd_data.cmd=1
[I/wifi_proc][Wifi_thread_loop:492] CMD_STA_ENABLE
udhcpc: started, v1.27.2
Setting IP address 0.0.0.0 on eth0
killall: wpa_supplicant: no process killed
insmod: can't insert '/lib/modules/4.9.118/sunxi-wlan.ko': No such file or directory
[    8.420733] libphy: 5020000.eth: probed
E0101 00:01:36.328186   856 audio_hw.c:1009]                <audioHw_AI_CapThread> aec_to_start_second_cap:96328035[    8.518931] sunxi-gmac 5020000.eth eth0: eth0: Type(6) PHY ID 00000128 at 1 IRQ poll (5020000.eth-0:01)

udhcpc: sending discover
[    8.632713] ======== XRADIO WIFI OPEN ========
[    8.637728] [XRADIO] Driver Label:XR_V02.15.54  Mar 24 2022 05:55:35
[    8.649115] [XRADIO] Allocated hw_priv @ c2cfcc00
[    8.654967] sunxi-wlan wlan: bus_index: 1
[    8.780892] sunxi-mmc sdc1: sdc set ios:clk 0Hz bm PP pm UP vdd 21 width 1 timing LEGACY(SDR12) dt B
[    8.798533] [XRADIO] Detect SDIO card 1
[    8.813102] sunxi-mmc sdc1: no vqmmc,Check if there is regulator
[    8.848513] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    8.889110] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    8.902350] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing LEGACY(SDR12) dt B
[    8.932042] sunxi-mmc sdc1: sdc set ios:clk 400000Hz bm PP pm ON vdd 21 width 1 timing SD-HS(SDR25) dt B
[    8.942892] sunxi-mmc sdc1: sdc set ios:clk 50000000Hz bm PP pm ON vdd 21 width 1 timing SD-HS(SDR25) dt B
[    8.953976] sunxi-mmc sdc1: sdc set ios:clk 50000000Hz bm PP pm ON vdd 21 width 4 timing SD-HS(SDR25) dt B
[    8.965771] mmc1: new high speed SDIO card at address 0001
[    8.973035] [SBUS] XRadio Device:sdio clk=50000000
[    8.985614] [XRADIO] XR819 Warning: Power Management is disabled!!!
[    8.985614] If you need XR819 to support suspend and resume,please enable Power Management.
[    9.002347] [XRADIO] XRADIO_HW_REV 1.0 detected.
[    9.110536] [XRADIO] Bootloader complete
WARNING: awplayer <__FileStreamConnect:446>: invalid size(0), try to get it myself...
WARNING: awplayer <__FileStreamConnect:451>: got it, size(59296)
WARNING: awplayer <__FileStreamCon[    9.198678] [XRADIO] Firmware completed.
nect:478>: File too small, size(59296), will read all for probe...
ERROR  : aac_parser <AacProbe:926>: This is not latm...
DEBUG  : aw_demux <PrintMediaInfo:466>: *********PrintMediaInfo begin*********
DEBUG  : aw_[    9.223099] [WSM] Firmware Label:XR_C01.08.52.11 Jan 24 2017 10:15:58
demux <PrintMediaInfo:480>: fileSize = 59296, bSeekable = 1, duration = 5649, audioNum = 1, videoNum = 0, subtitleNum = 0
DEBUG  : aw_demux <PrintMediaInfo:516>: ***Audio[0]*** eCodecFormat = 0x3, eSubCodecFormat = 0x0, nChannelNum = 1, nBitsPerSample = [    9.257143] [XRADIO] Firmware Startup Done.
0, nSampleRate = 44100
DEBUG  : aw_demux <PrintMediaInfo:532>: *********PrintMediaInfo end*********
W0101 00:01:37.038187   832 Demux_Component.c:754]          <CreateDemuxPorts> no video?[0][0]
W0101 00:01:37.038403   832 Demux_Component.c:801]          <CreateDemuxPorts> no subtitle?[0][0]
Audio Info: ChannelNum = 1 BitsPerSample = 0 SampleRate = 44100
[I/arender][__arender_init:263] rate:44100 width:1 cnt:1
W0101 00:01:37.066577   832 alsa_interface.c:435]           <alsaOpenPcm> open pcm! card:[default], pcmFlag:[1](0-cap;1-play)
[I/arender][__arender_init:278] create ao channel[0] success!
[W/a[    9.321078]  phy0: Selected rate control algorithm 'minstrel_ht'
mix_comp][amix_comp_create:394] amix create:0x11e0ef0 insem:0x11d0020 outsem:0x11cfe40
[W/amix_comp][amix_comp_track_open:238] Not support format mix! (44100 1 16)
[I/amix_comp][amix_comp_track_open:246] Create track index:0, num:1 name:file(file)
[I/aplayer][dec2mix_thread:56] dec2mix thread enter
[I/aplayer][mix2render_thread:104] enter mix2render thread.
(AllwinnerAlibs),line(27) : init successs...
W0101 00:01:37.257306   905 mpi_demux.c:252]                <DemuxEventHandler> EOF found!
[I/aplayer][svc_aplayer_set_vol:361] set volume:left[60][I/demux2adec][MPPCallbackWrapper:53] demux get EOF flag
W0101 00:01:37.266060   910 audio_hw.c:1949]                <AudioHw_AO_SetPubAttr> Careful for 2 AoChns at the same time! They must have the same param!
[I/ring][Ring_thread_proc:95] -->
W0101 00:01:37.457827   905 Demux_Component.c:2392]         <ComponentThread> [0x11b5e40]:Demux EOF found! A
Successfully initialized wpa_supplicant
[    9.716299] [STA] !!!xradio_vif_setup: id=0, type=2, p2p=0
[    9.742487] [AP_WRN] BSS_CHANGED_ASSOC but driver is unjoined.
[FUN]wifi_sta_open [LINE]592  Create wpa_supplicant success! cnt:95
[FUN]:wpa_ctrl_open [LINE]:114 bind  UNIX:/tmp/wpa_ctrl_832-1 socket OK! ret:0
[FUN]wpa_cli_cmd [LINE]110  cmd:SCAN  buf:OK
 len:3
[FUN]:wpa_ctrl_open [LINE]:114 bind  UNIX:/tmp/wpa_ctrl_832-2 socket OK! ret:0
[I/wifi_proc][wpa_event_callback:703] event:6
[FUN]sta_event_proccess [LINE]437  wpa_event:<3>CTRL-EVENT-SCAN-RESULTS   sta_event:6
[I/wifi][WIFI_sta_start:715] Scan AP list is end!
[FUN]:wpa_ctrl_open [LINE]:114 bind  UNIX:/tmp/wpa_ctrl_832-3 socket OK! ret:0
 ERROR! [FUN]wpa_parse_apinfo [LINE]286  Input buf_list is title! buf:bssid / frequency / signal level / flags / ssid
[FUN]wifi_sta_get_scan_results [LINE]815  wifi scan cnt:0  ap_list_num:6  bssid:50:ff:20:22:ed:30  db:-77  freq:2437  security:3  alg_type:0  ssid:Vivaldi
[FUN]wifi_sta_get_scan_results [LINE]815  wifi scan cnt:1  ap_list_num:6  bssid:52:ff:20:12:ed:30  db:-77  freq:2437  security:3  alg_type:0  ssid:Viva
[FUN]wifi_sta_get_scan_results [LINE]815  wifi scan cnt:2  ap_list_num:6  bssid:52:ff:20:42:ed:30  db:-77  freq:2437  security:3  alg_type:0  ssid:
[FUN]wifi_sta_get_scan_results [LINE]815  wifi scan cnt:3  ap_list_num:6  bssid:58:8b:f3:6b:be:d4  db:-81  freq:2462  security:3  alg_type:0  ssid:Vivaldi
[FUN]wifi_sta_get_scan_results [LINE]815  wifi scan cnt:4  ap_list_num:6  bssid:5a:8b:f3:68:be:d4  db:-81  freq:2462  security:3  alg_type:0  ssid:Viva
[FUN]wifi_sta_get_scan_results [LINE]815  wifi scan cnt:5  ap_list_num:6  bssid:5a:8b:f3:6b:be:d4  db:-81  freq:2462  security:3  alg_type:0  ssid:
[I/wifi][WIFI_sta_start:726] sta start success
udhcpc: sending discover
[I/tuya][tuya_init:395] tuya ipc init, version:<TUYA IPC SDK V:4.8.9 >
< TUYA IOT SDK V:4.1.1 BS:30.01_PT:2.2_LAN:3.3_CAD:1.0.1_CD:1.0.0 >
IPC DEFS < ENABLE_ECHO_SHOW:0 ENABLE_CHROMECAST:0 ENABLE_CLOUD_STORAGE:1 >'
< BUILD AT:2021_05_26_17_58_12 BY chenjing FOR linux_wifi_wired AT arm-openwrt-linux-muslgnueabi >

tuya_app_init_sdk..
init_mode=0
TUYA PID:0ukszkfaejkqpz9o
[W/tuya][tuya_uuid_debug:273] Write uuid:pid:0ukszkfaejkqpz9o  uuid:skxtb9d846e8452dbdc5
[I/tuya][tuya_app_init_sdk:332] Init Value.storage_path /mnt/UDISK/
[I/tuya][tuya_app_init_sdk:333] Init Value.upgrade_file_path /mnt/sdcard/upgrade.file
[I/tuya][tuya_app_init_sdk:334] Init Value.sd_base_path /mnt/sdcard/
[I/tuya][tuya_app_init_sdk:335] Init Value.product_key 0ukszkfaejkqpz9o
[I/tuya][tuya_app_init_sdk:336] Init Value.uuid skxtb9d846e8452dbdc5
[I/tuya][tuya_app_init_sdk:337] Init Value.auth_key zyrZ6wWXx9ylXRA2GDZfWDG622mPVWd3
[I/tuya][tuya_app_init_sdk:338] Init Value.p2p_id
[I/tuya][tuya_app_init_sdk:339] Init Value.dev_sw_version 1.2
[I/tuya][tuya_app_init_sdk:340] Init Value.max_p2p_user 5
Dbg:channel_enable:1 1 0
Dbg:fps:25
Dbg:gop:50
Dbg:bitrate:1024 kbps
Dbg:video_main_width:1280
Dbg:video_main_height:720
Dbg:video_freq:90000
Dbg:video_codec:4
Dbg:audio_codec:101
Dbg:audio_sample:8000
Dbg:audio_databits:16
Dbg:audio_channel:0
Dbg:init ring buffer Channel:0 Enable:1
Dbg:video_bitrate 1024, video_fps 25
Dbg:init ring buffer success. channel:0
Dbg:init ring buffer Channel:1 Enable:1
Dbg:video_bitrate 256, video_fps 25
Dbg:init ring buffer success. channel:1
Dbg:init ring buffer Channel:2 Enable:0
Dbg:init ring buffer Channel:3 Enable:0
Dbg:init ring buffer Channel:4 Enable:0
Dbg:init ring buffer Channel:5 Enable:0
Dbg:init ring buffer Channel:6 Enable:0
Dbg:init ring buffer Channel:7 Enable:0
Dbg:init ring buffer Channel:8 Enable:0
Dbg:init ring buffer Channel:9 Enable:1
Dbg:audio_sample 8000, audio_databits 16, audio_fps 25
Dbg:init ring buffer success. channel:9
Dbg:init ring buffer Channel:10 Enable:0
Dbg:init ring buffer Channel:11 Enable:0
Dbg:init ring buffer Channel:12 Enable:0
Dbg:init ring buffer Channel:13 Enable:0
Dbg:init ring buffer Channel:14 Enab[   14.568498] [STA_WRN] !!! xradio_remove_interface: vif_id=0
le:0
Dbg:init ring buffer Channel:15 Enable:0
curr event:0
[W/led][Led_net_state_set:109] net_type=0,state=0
[01-01 18:12:15-- TUYA Debug][tuya_iot_com_api.c:94] init fs. Path: /mnt/UDISK/
[01-01 18:12:15-- TUYA Info][kv_storge.c:43] In[   14.601547] [STA] !!!xradio_vif_setup: id=0, type=2, p2p=0
it Kvs With File:/mnt/UDISK/
[01-01 18:12:15-- TUYA Debug][simplekv.c:916] path:/mnt/UDISK/
[01-01 18:12:15-- TUYA Debug][simplekv.c:952] get encrypt_key[--h-V4~--FDV]
[01-01 18:12:15-- TUYA Debug][simplekv.c:983] both file exist
[01-01 18:12:1[   14.628406] [AP_WRN] BSS_CHANGED_ASSOC but driver is unjoined.
5-- TUYA Debug][simplekv.c:280] size in: 0 and final: 28700 And mag_rec_max: 512
[01-01 18:12:15-- TUYA Debug][simplekv.c:295] create data hd success
[01-01 18:12:15-- TUYA Debug][simplekv.c:1026] read from normal file
[01-01 18:12:15-- TUYA Debug][simplekv.c:736] curr db is V2. No need to upgrade
[01-01 18:12:15-- TUYA Debug][simplekv.c:526] head check success
[01-01 18:12:15-- TUYA Debug][simplekv.c:629] read and check head success
[01-01 18:12:15-- TUYA Debug][simplekv.c:1041] read from normal file success
[01-01 18:12:15-- TUYA Debug][uni_thread.c:161] Init Thread Del Mgr
[01-01 18:12:15-- TUYA Debug][simplekv.c:1079] init from normal file success.
[01-01 18:12:15-- TUYA Debug][sys_timer.c:63] system timer has been inited
[01-01 18:12:15-- TUYA Debug][sys_timer.c:63] system timer has been inited
[01-01 18:12:15-- TUYA Debug][sys_timer.c:63] system timer has been inited
[01-01 18:12:15-- TUYA Err][online_log_serv.c:317] log stats ufread fail.
[01-01 18:12:15-- TUYA Debug][online_log_serv.c:581] log serv init success
[01-01 18:12:15-- TUYA Debug][ty_work_queue.c:22] init work queue. stack size:2560 pro:3 num:2
[01-01 18:12:15-- TUYA Debug][ty_work_queue.c:27] ty work queue create success
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2226] serial_no:(null)
Set Country Code:CN
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2255] gw_cntl.gw_wsm.stat:0
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2258] gw_cntl.gw_wsm.nc_tp:1
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2259] gw_cntl.gw_wsm.md:0
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2292] gw_cntl.gw_if.abi:0 input:0
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2293] gw_cntl.gw_if.product_key:0ukszkfaejkqpz9o, input:0ukszkfaejkqpz9o
[01-01 18:12:15-- TUYA Notice][gw_intf.c:2294] gw_cntl.gw_if.tp:0, input:0
[I/tuya][tuya_init:400] tuya_app_init_sdk s_mqtt_status=0
STA Disconn AP
udhcpc: sending discover
[I/demux2adec][MPPCallbackWrapper:65] adec get EOF flag
[I/ring][Ring_thread_proc:128] <<--
[I/aplayer][svc_aplayer_file_stop:288] -->
[I/aplayer][dec2mix_thread:92] dec2mix thread exit
[I/amix_comp][amix_comp_track_close:265] Close track, index:0
[I/amix_comp][amix_comp_track_close:274] Close track complete.
[I/aplayer][mix2render_thread:130] exit mix2render thread.
E0101 00:01:43.000682   930 alsa_interface.c:878]           <alsaMixerSetAudioCodecHubMode> aec_elem_audio_codec_hub_mode:codec hub mode-0
E0101 00:01:43.000951   930 alsa_interface.c:901]           <alsaMixerSetDAudio0HubMode> aec_elem_daudio0_hub_mode:sunxi daudio audio hub mode-0
E0101 00:01:43.001103   930 alsa_interface.c:924]           <alsaMixerSetDAudio0LoopBackEn> aec_elem_daudio0_loopback_en:sunxi daudio loopback debug-0
W0101 00:01:43.001199   930 audio_hw.c:2155]                <audioHw_AO_Disable> close pcm! current AoCardType:[0]
W0101 00:01:43.001280   930 alsa_interface.c:479]           <alsaClosePcm> close pcm pcmFlag=1
[I/arender][arender_destroy:385] -->
E0101 00:01:43.001761   930 mpi_ao.c:389]                   <AW_MPI_AO_StopChn> Invalid AudioDevId -1!
E0101 00:01:43.001900   930 mpi_ao.c:249]                   <AW_MPI_AO_DisableChn> Invalid AudioDevId -1!
[I/arender][arender_destroy:395] <--
[I/amix_comp][audio_mix_thread:196] amixer thread exit
W0101 00:01:43.020310   905 Demux_Component.c:2392]         <ComponentThread> [0x11b5e40]:Demux EOF found! A
W0101 00:01:43.020530   907 Demux_Component.c:2019]         <DemuxFillThisBuffer> Be careful! Call DemuxFillThisBuffer in state[0x2]!
(AllwinnerAlibs),line(34) : exit successs...
W0101 00:01:43.121696   905 Demux_Component.c:2392]         <ComponentThread> [0x11b5e40]:Demux EOF found! A
[I/aplayer][svc_aplayer_file_stop:314] <<--
[I/ring][Ring_thread_proc:133] Ring_thread_proc exit
[I/aplayer][svc_aplayer_file_stop:288] -->
[I/aplayer][svc_aplayer_file_stop:314] <<--
[I/wifi_proc][wpa_event_callback:703] event:6
[FUN]sta_event_proccess [LINE]437  wpa_event:<3>CTRL-EVENT-SCAN-RESULTS   sta_event:6
WIFI Scan AP Begin
index:0 bssid:50-FF-20-22-ED-30 RSSI:46 SSID:Vivaldi
index:1 bssid:52-FF-20-12-ED-30 RSSI:46 SSID:Viva
index:2 bssid:52-FF-20-42-ED-30 RSSI:46 SSID:
index:3 bssid:58-8B-F3-6B-BE-D4 RSSI:40 SSID:Vivaldi
index:4 bssid:5A-8B-F3-68-BE-D4 RSSI:40 SSID:Viva
index:5 bssid:5A-8B-F3-6B-BE-D4 RSSI:40 SSID:
WIFI Scan AP End
[   16.298518] [STA_WRN] !!! xradio_remove_interface: vif_id=0
[   16.321177] [STA] !!!xradio_vif_setup: id=0, type=6, p2p=0
wlan0: Invalid HW-addr family 0x0323
curr event:1
[W/led][Led_net_state_set:109] net_type=0,state=1
Enable Sniffer
[   16.377268] [STA_WRN] !!! xradio_remove_interface: vif_id=0
[   16.400015] [STA] !!!xradio_vif_setup: id=0, type=6, p2p=0
wlan0: Invalid HW-addr family 0x0323
Enable Qrcode
[I/ipc_qr][thread_qrcode:130] Qrcode Thread start
[I/ipc][ipc_cloud_rec_stop:973] ipc stop cloude rec. ret:-1 stat:0
[I/ipc][ipc_local_rec_stop:899] ipc stop recorder. ret:-1 stat:0
[I/media][media_rec_md_stop:992] -->>
[W/media][media_rec_md_stop:995] Motion detect not opened.
[I/qr][qr_scan_video_start:206] qr_ctx->m_width:640 qr_ctx->m_height:480
[I/svc_rec][svc_capture_start:1190] -->
[I/svc_rec][svc_capture_start:1194] svc->run_stat[1]:0
[ISP]video device name is vin_video1
[ISP]open video device[1], detect isp0 success!
[E/svc_rec][vi_channel_init:763] use 4 v4l2 buffers!!!Sniffer Thread Create
E0101 00:01:44.253022   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.273370   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.293701   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.313978   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.334226   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.354450   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.374766   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.395131   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.415435   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.435736   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.456001   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.476252   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.496530   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.516853   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
[   16.715387] [gc2053_mipi] error, sensor_reg_init: start sensor_write_array(wsize->regs)
E0101 00:01:44.541851   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.562237   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!![   16.753147] sensor_s_hflip hflip=0,

[   16.757585] ready to hflip, regs_data = 0x80
E0101 00:01:44.582540   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.602840   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.623122   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.644092   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.664474   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.684849   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
[   16.878736] after hflip, regs_data = 0x80, sensor_flip_status = 0
[   16.885601] sensor_s_vflip vflip=0,
E0101 00:01:44.706926   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!![   16.890512] ready to vflip, regs_data = 0x80

E0101 00:01:44.727245   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.747529   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.767815   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.788188   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
[   16.980153] after vflip, regs_data = 0x80, sensor_flip_status = 0
E0101 00:01:44.808619   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
[I/svc_rec][vi_channel_init:777] ctx->ispRun:0
[ISP]>>>>>>>>>>>>>>>>>>>> ISP VERSION INFO <<<<<<<<<<<<<<<<<<<
IPCORE: ISP521
branch: isp521-ipc
commit: efa5ea932f392e9a75f70a44a23a7c132a4cdda6
date  : Mon Nov 16 13:40:47 2020 +0800
author: <[email protected]>
--------------------------------------------------------

[ISP]open isp device[0] success!
[ISP_ERR]isp_sensor_otp_init, line: 88,VIDIOC_VIN_GET_SENSOR_OTP_INFO return error:Invalid argument
[ISP]otp disabled, msc use 1024
[ISP_WARN]open /mnt/sdcard/isp0_1920_1080_25_ctx_saved.bin failed!!!
[ISP]find gc2053_mipi_1920_1080_25_0_0 [gc2053_25fps_ini_cdr] isp config
loop VideoInputHw_CapThread vipp_id = 1, buf_num=4.
E0101 00:01:44.829050   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
[ISP]create isp0 server thread!
[I/svc_rec][vi_channel_init:793] night=0
[ISP]find gc2053_mipi_1920_1080_25_0_0 [gc2053_25fps_ini_cdr] isp config
E0101 00:01:44.848864   983 video_buffer_manager.c:214]     <VideoBufMgrCreate> Alloc 20 input frame buffers in list manager.
E0101 00:01:44.849392   985 mpi_vi.c:1157]                  <AW_MPI_VI_GetFrame> vichn[0] is unexist!!
E0101 00:01:44.849309   983 VideoVirVi_Component.c:481]     <VideoViSetViDevAttr> fps 25 nbufs 4
[I/svc_rec][svc_capture_start:1209] <--
[I/tuya][__IPC_APP_Get_Net_Status_cb:90] Net status change to:1
[01-01 18:12:20-- TUYA Err][app_agent.c:833] sendto Failed,len:172 ret:-1,errno:-18 port:6667
[01-01 18:12:25-- TUYA Err][app_agent.c:833] sendto Failed,len:172 ret:-1,errno:-18 port:6667

lsmod:

root@(none):/# lsmod
Module                  Size  Used by
xradio_wlan              662  0
xradio_core           181429  1 xradio_wlan
xradio_mac            171819  1 xradio_core
vin_v4l2              107061  6
gc2053_mipi             6506  0
vin_io                 17064  4 vin_v4l2,gc2053_mipi
videobuf2_v4l2          7577  1 vin_v4l2
videobuf2_dma_contig     7070  1 vin_v4l2
videobuf2_memops         948  1 videobuf2_dma_contig
videobuf2_core         16856  2 vin_v4l2,videobuf2_v4l2

cat /proc/mtd:

root@(none):/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00100000 00001000 "uboot"
mtd1: 00300000 00001000 "boot"
mtd2: 00a80000 00001000 "rootfs"
mtd3: 00080000 00001000 "rootfs_data"
mtd4: 00020000 00001000 "env"
mtd5: 00010000 00001000 "misc"
mtd6: 00008000 00001000 "id"
mtd7: 00010000 00001000 "private"
mtd8: 000b8000 00001000 "UDISK"

mount:

root@(none):/# mount
/dev/root on /rom type squashfs (ro,relatime)
devtmpfs on /dev type devtmpfs (rw,relatime,size=28024k,nr_inodes=7006,mode=755)
/proc on /proc type proc (rw,relatime)
tmpfs on /tmp type tmpfs (rw,relatime)
sys on /sys type sysfs (rw,relatime)
/dev/by-name/rootfs_data on /overlay type jffs2 (rw,relatime)
overlayfs:/overlay on / type overlay (rw,noatime,lowerdir=/,upperdir=/overlay/upper,workdir=/overlay/workdir)
tmpfs on /run type tmpfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,gid=5,mode=620,ptmxmode=000)
/dev/by-name/UDISK on /mnt/UDISK type vfat (rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=utf8,shortname=mixed,errors=remount-ro)
/dev/mmcblk0p1 on /mnt/sdcard type exfat (rw,relatime,fmask=0000,dmask=0000,allow_utime=0022,iocharset=utf8,namecase=0,errors=remount-ro)
/dev/pts on /dev/pts type devpts (rw,relatime,mode=600,ptmxmode=000)
none on /sys/kernel/config type configfs (rw,relatime)
adb on /dev/usb-ffs/adb type functionfs (rw,relatime)
none on /sys/kernel/debug type debugfs (rw,relatime)

ps:

root@(none):/# ps
  PID USER       VSZ STAT COMMAND
    1 root       992 S    /sbin/init
    2 root         0 SW   [kthreadd]
    3 root         0 SW   [ksoftirqd/0]
    4 root         0 SW   [kworker/0:0]
    5 root         0 SW<  [kworker/0:0H]
    6 root         0 SW   [kworker/u2:0]
    7 root         0 SW   [rcu_preempt]
    8 root         0 SW   [rcu_sched]
    9 root         0 SW   [rcu_bh]
   10 root         0 SW<  [lru-add-drain]
   11 root         0 SW   [kdevtmpfs]
   12 root         0 SW   [kworker/u2:1]
  239 root         0 SW   [oom_reaper]
  240 root         0 SW<  [writeback]
  242 root         0 SW   [kcompactd0]
  243 root         0 SW<  [crypto]
  244 root         0 SW<  [bioset]
  246 root         0 SW<  [kblockd]
  294 root         0 SW   [sys_user]
  304 root         0 SW   [kworker/0:1]
  305 root         0 SW<  [cfg80211]
  312 root         0 SW<  [watchdogd]
  395 root         0 SW<  [spi0]
  405 root         0 SW   [kswapd0]
  500 root         0 SW<  [bioset]
  513 root         0 SW<  [bioset]
  518 root         0 SW<  [bioset]
  523 root         0 SW<  [bioset]
  528 root         0 SW<  [bioset]
  533 root         0 SW<  [bioset]
  538 root         0 SW<  [bioset]
  543 root         0 SW<  [bioset]
  548 root         0 SW<  [bioset]
  553 root         0 SW<  [bioset]
  596 root         0 SW   [irq/303-sunxi-m]
  598 root         0 SW   [irq/166-sdc0 cd]
  599 root         0 SW   [irq/304-sunxi-m]
  604 root         0 SW   [kworker/0:2]
  656 root         0 SW<  [unlock_wq]
  668 root         0 SW<  [bioset]
  669 root         0 SW   [mmcqd/0]
  690 root         0 SW<  [kworker/0:1H]
  711 root         0 SWN  [jffs2_gcd_mtd3]
  763 root         0 SW   [kworker/u2:2]
  830 root     15164 S    /usr/bin/ipdoor
  832 root      1000 S    -/bin/sh
  863 root       992 S    /sbin/udhcpc -i eth0 -p /var/run/udhcpc.pid /etc/udh
  891 root         0 SW   [xradio_etf]
  895 root         0 SW<  [xradio_wq]
  896 root         0 SW<  [xradio_spare_wq]
  901 root         0 SW   [xradio_bh]
  919 root      1372 S    /usr/sbin/wpa_supplicant -Dnl80211 -iwlan0 -c/var/ru
 6042 root       992 R    ps
 6043 root       992 S    sh -c iwlist wlan0 channel
 6044 root       712 R    iwlist wlan0 channel

ls -la /etc/init.d/

root@(none):/# ls -la /etc/init.d/
drwxr-xr-x    2 root     root           227 Mar 23  2022 .
drwxr-xr-x    1 root     root             0 Jan  1 00:00 ..
-rwxrwxr-x    1 root     root          1115 Mar 23  2022 S00mpp
-rwxrwxr-x    1 root     root           378 Mar 23  2022 S11dev
-rwxrwxr-x    1 root     root          1321 Mar 23  2022 S20urandom
-rwxrwxr-x    1 root     root           661 Mar 23  2022 S40network
-rwxrwxr-x    1 root     root           401 Mar 23  2022 S41netparam
-rwxrwxr-x    1 root     root          4288 Mar 23  2022 S50usb
-rwxr-xr-x    1 root     root           529 Mar 23  2022 S90ipdoor
-rwxr-xr-x    1 root     root           745 Mar 23  2022 cron
-rwxr-xr-x    1 root     root           878 Mar 23  2022 ntpd
-rwxrwxr-x    1 root     root           900 Mar 23  2022 rc.final
-rwxrwxr-x    1 root     root           252 Mar 23  2022 rc.modules
-rw-rw-r--    1 root     root            50 Mar 23  2022 rc.preboot
-rwxrwxr-x    1 root     root           448 Mar 23  2022 rcK
-rwxrwxr-x    1 root     root          3466 Mar 23  2022 rcS

[roleoroleo]

The soc is the same (or very similar).
I think it's possible to do something.
But the software is different.
Start with a dump of all partitions and try to analyze the boot process/scripts.

[nordeep]

I have some investigations. It's standard init.d system invoked by init=/pseudo_init which I can prevent by set other init from u-boot by init=/bin/ash.

root@(none):/# ls -la /etc/init.d/
drwxr-xr-x    2 root     root           227 Mar 23  2022 .
drwxr-xr-x    1 root     root             0 Jan  1 00:00 ..
-rwxrwxr-x    1 root     root          1115 Mar 23  2022 S00mpp
-rwxrwxr-x    1 root     root           378 Mar 23  2022 S11dev
-rwxrwxr-x    1 root     root          1321 Mar 23  2022 S20urandom
-rwxrwxr-x    1 root     root           661 Mar 23  2022 S40network
-rwxrwxr-x    1 root     root           401 Mar 23  2022 S41netparam
-rwxrwxr-x    1 root     root          4288 Mar 23  2022 S50usb
-rwxr-xr-x    1 root     root           529 Mar 23  2022 S90ipdoor
-rwxr-xr-x    1 root     root           745 Mar 23  2022 cron
-rwxr-xr-x    1 root     root           878 Mar 23  2022 ntpd
-rwxrwxr-x    1 root     root           900 Mar 23  2022 rc.final
-rwxrwxr-x    1 root     root           252 Mar 23  2022 rc.modules
-rw-rw-r--    1 root     root            50 Mar 23  2022 rc.preboot
-rwxrwxr-x    1 root     root           448 Mar 23  2022 rcK
-rwxrwxr-x    1 root     root          3466 Mar 23  2022 rcS

The main service ipdoor is doing all the work:

1. feed watchdog
2. connect to cloud and etc